bostanciescortq[.]com

The domain bostanciescortq.com has been identified as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates the domain is currently offline, though prior activity suggests it was actively used to collect sensitive authentication credentials. No specific brand impersonation has been confirmed, but the infrastructure aligns with generic phishing campaigns designed to harvest user data. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GMO Internet Group, Inc. d/b/a Onamae.com. It resolves to the IP address 193.105.134.30, hosted under AS42237 (w1n ltd) in Sweden. The domain appears on one security blocklist and has been flagged by 10 of 95 security vendors on VirusTotal. The SSL certificate is issued by GoDaddy.com, specifically under the GoDaddy TLS Intermediate CA DV - R1v1 chain. The page title, "Страница не найдена," suggests either a placeholder or localized targeting, though no active content remains. Current status confirms the domain has been taken offline, likely in response to detection and blocking by security mechanisms. Organizations and users are advised to treat any prior interactions with this domain as compromised. Network administrators should block the IP address 193.105.134.30 and monitor for related domains registered through the same registrar. End-users should reset credentials if they recall entering information on this site and enable multi-factor authentication where available.